An AI agent client for Windows
ChengApp is the Windows desktop client for the ChengOS platform, built with Tauri 2 and Rust. This page describes only behaviour that can be checked in source or tests, and the conditions under which it holds.
Local workspaces and single-instance hand-off
The client organises files and sessions per workspace. Launching the app a second time does not open a second window: it raises the existing one and hands the directory from that launch to the current workspace, so "open this folder" behaves predictably.
Workspace path boundaries
Workspace path validation covers the usual Windows escape routes: junction normalisation, \\?\ path comparison, alternate data streams, and rejection of reserved device names such as CON, NUL, COM1 and LPT1. This is path-level validation — it is not a full sandbox or a security certification, and it does not replace operating-system permissions.
Where credentials stop and the model begins
Credentials live in a vault; the model only ever receives a handle it can pass to a tool, so raw API keys never enter the model context. Content a user pastes into the conversation themselves is outside that boundary.
System requirements
Windows 10 1809 or later, or Windows 11, 64-bit. The client relies on the system WebView2 runtime. How the installer detects or provisions WebView2 is still being confirmed, so we do not market it as a feature until it is.
Questions people ask
- How do ChengApp and ChengOS relate?
- ChengOS is the platform that orchestrates and executes workflows and agents. ChengApp is its client for Windows and Android. You can use the client against someone else’s ChengOS deployment, or run your own.
- Is there a macOS build?
- Not yet. macOS appears only on the roadmap; the release manifest carries no macOS package, so we do not list it as a supported platform.
Evidence for the claims on this page
Last verified:
- 重复打开应用时会回到已有窗口，并可将本次启动携带的目录交给当前工作区。
- Scope: Windows 桌面客户端。
- Source: chengapp/src-tauri — tauri-plugin-single-instance，chengapp://launch-path 事件 ·
- 工作区路径校验覆盖 Windows junction、备用数据流与保留设备名等路径边界。
- Scope: 覆盖 junction 规范化、\\?\ 路径比较、ADS 与 CON/NUL/COM1/LPT1 设备名拒绝；不等同于完整安全认证。
- Source: chengapp Windows 路径校验测试 ·
- 模型只能通过凭据句柄调用工具，API Key 明文不进入模型上下文。
- Scope: 凭据保管库与工具调用路径；不涵盖用户自行粘贴到对话中的内容。
- Source: ChengOS Credential Vault 与工具调用实现 ·
- 当前提供 Windows 与 Android 客户端；macOS 仅在路线图中，无 iOS 目标。
- Scope: 以发布清单 lib/config/release-manifest.json 为准。
- Source: lib/config/release-manifest.json ·